Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 01:16

General

  • Target

    45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe

  • Size

    1.1MB

  • MD5

    9bd9899dfed52791f2ad4ea21194b016

  • SHA1

    7c6165cd84aa9d848869f31491be10c4bcabafb6

  • SHA256

    45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761

  • SHA512

    edcad9fc0eb993c95cce3c5a9a1692f87972a4ede0e61aef164a2464c022930c515783751a3a2722be4e9b473a4f60246d171432d49a9b5a620b4c22eefc3346

  • SSDEEP

    24576:lAHnh+eWsN3skA4RV1Hom2KXMmHaco5m0JXfz1IZY3ub5:Uh+ZkldoPK8Yaco5HBA4e

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe
    "C:\Users\Admin\AppData\Local\Temp\45d4b0a1c89a7192b5a3de30e1568200d33941e8bc6b983c6bf5fe525fe83761.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\croc

    Filesize

    266KB

    MD5

    48067d5ba3abc44be5a4cd2cba27fd2e

    SHA1

    c3b617cb75eb48b8da34eaa3b5eac41610231078

    SHA256

    035e764be5a63a345536a38aa9adcaa1eeedcfdf75af7731b14d93266aa04e0c

    SHA512

    bb03360a1d9e1cb02b1ed0d01d391c089038b97645a4a99eb291a6e546ccbcc9dadc80f2367f3acd2f2e593d3173007dd46c8072a0e13f76176f0ec3156faeae

  • memory/1912-11-0x00000000002D0000-0x00000000002D4000-memory.dmp

    Filesize

    16KB